GOVRAT V2.0

Recommendations

Info

GOVRAT V2.0 ATTACKING US MILITARY AND GOVERNMENT There is another bad actor identified as “PoM,” who is a partner of popopret, and is selling 33,000 records with credentials related to the US Government and various research and educational organizations. 12
GOVRAT V2.0 ATTACKING US MILITARY AND GOVERNMENT In the post description, he outlines that the data was hashed but he was able to decrypt it and can potentially use it for “accessing other agencies,” as well as for use in SE (social engineering) and spear phishing campaigns. PoM provides the stolen data of government and military employees to other actors using GovRAT v2.0 for highly targeted malware delivery. After a thorough analysis, it was determined that most of this data was accessed from the hacked National Institute of Building Sciences (http://www.nibs.org/) website. It contains numerous members from the research, educational, government and military community. 13
Page 1 and 2: GOVRAT V2.0 ATTACKING US MILITARY A
Page 11: GOVRAT V2.0 ATTACKING US MILITARY A
Page 21: 800 789 2720 / ATI.INFOARMOR.COM IA

GOVRAT V2.0

Create successful ePaper yourself

Delete template?

Save as template?